[tor-bugs] #4234 [Tor Browser]: Investigate the Firefox update process

[Tor Bug Tracker & Wiki]

#4234: Investigate the Firefox update process
-------------------------+--------------------------------------------------
 Reporter:  mikeperry    |          Owner:  mikeperry                    
     Type:  task         |         Status:  new                          
 Priority:  major        |      Milestone:  TorBrowserBundle 2.3.x-stable
Component:  Tor Browser  |        Version:                               
 Keywords:               |         Parent:                               
   Points:               |   Actualpoints:                               
-------------------------+--------------------------------------------------
 Sure, it's probably not hardened against version downgrade attacks,
 interruption attacks, no-progress attacks, and maybe not even against CA
 compromises.

 But it's gotta be better than nothing, and maybe it is easily serviceable
 into something that will work for us.

 Users are having a hard time manually working with our TBB packages if
 they want to preserve bookmarks, settings, and history, and are getting
 themselves into trouble by copying pieces of them over each other
 incorrectly while trying to manually upgrade:
 https://lists.torproject.org/pipermail/tor-talk/2011-October/021771.html

 I think any form of process that automates this for them is a step above
 status quo. It's just a matter of finding out if it is significantly less
 time+effort to deploy than Thandy, and what the security tradeoffs are.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4234>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online